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A Brief History of Cryptography 
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Quantum Mechanics 



• Explains the behaviour of matter and its interactions with energy on the 
scale of atoms and atomic particles 

• Particle-wave duality 

- Subatomic particles can have both wave-like and particle-like properties 

• Uncertainty principle 

- Certain pairs of physical properties, such as position and speed, cannot both be known to 
arbitrary precision 

- Heisenberg showed that the more precisely one of them is known, the less precisely the 
other can be known 

• Practical applications of quantum mechanics 

- The laser, the transistor, the electron microscope, magnetic resonance imaging 

- The study of semiconductors led to the invention of the diode and the transistor, which 
are indispensable for modern electronics 
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Encryption Systems Today 



Security today is dependent on one or more assumptions 

- Efficient mathematical attacks will never be feasible 

- Computing resources will never be sufficiently powerful for brute-force 
attacks 

- New technologies such as quantum computers will never be developed to 
sufficient scale 

- Public Key Infrastructure will always be secure from attack 

- Trusted Third Parties can always be trusted for authentication 



Long-lived data encrypted by conventional methods can be 
stored for future decryption 

- Sovereign/ criminal eavesdropping activity 

- Such data at risk today 
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INTRODUCTION TO THE THEORY 
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How QKD Works 




QUANTUM CHANNEL 



CLASSICAL CHANNEL 
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Discrete Variable 



Continuous Variable 
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How is QKD Secure? 


• At a quantui 
precision (e 


n level, certain pairs of variables cannot be known with arbitrary 
g. position and momentum) 




\^ / 00m ^\ 


Heisenburg 
Uncertainty 
Principle 




^^•->? 


Ax Ap > — 




^TT 




• At the quantum level merely observing a particle will affect it e.g. light particles 
(photons) will bounce off particle, affecting it 
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Single Photon QKD 
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[Bennett and Brassard, Proceedings IEEE., (1984)] 
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Discrete Variable Key Distribution 

Alice generates a secret random bit sequence 

Alice encodes the sequence as quantum states on individual photons 
and sends it to Bob 

Alice and Bob sift the information 

- Bob tells Alice what basis he used 

- Alice tells Bob if the basis he chose was correct or not 

Alice and Bob reconcile errors and estimate Eve's information 
Alice and Bob each perform privacy amplification 
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"Bright Laser" QKD 



Lasers are ideal for telecommunications 

Information can be encoded by varying the amplitude and the phase of a laser: 
AM and FM encoding E ^^w ^re 
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For a laser the amplitude and the phase of a laser beam cannot be 
simultaneously determined 

Quantum noise can be represented by a Ball and stick diagram 
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Continuous Variable Analogue to BB84 
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Continuous Variable Key Distribution 

Alice generates a secret random bit sequence 

Alice encodes the sequence as quantum states on a laser beam and 
sends it to Bob 

Alice and Bob post select the information 

- Bob tells Alice which bits he's keeping 

Alice and Bob reconcile errors and estimate Eve's information 
Alice and Bob each perform privacy amplification 
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Necessary Ingredients for QKD 

We only need two things 
Differential correlations 

- Alice and Bob share different information to everyone else. 
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Bob 
Alice 

P ana nan an nan a □ □□□ a □□ □□□ □ □□ nan a 

- No-cloning theorem always guarantees this! 

• Known bounds 

- Heisenberg uncertainty, no-cloning limit, Shannon entropy, etc. 

- There exist classical information protocols to distil secret key, 
reconcile data, and amplify privacy remotely. ^,^01,2012 



Post Selection 



Bob discards all the 
states for which he 
estimates he has less 
information than Eve 
(red). 

Eve has no control on 
that process and is left 
with less information. 
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Privacy Amplification 

[(l/0)x 110503 +(l/0)x 110502 +. . .+(l/0)x+(l/0)]x [w 110503 +. • •+ r ] 
moc[x 110503 +x 5011 +l] 
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Summary: Steps to a Secret Key 



Alice 



Bob 



Eve 
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The Future 



• Remove Excess Noise 

- Provisional patent drafted for a method of post selection to create a virtual channel with 
zero excess noise from a channel affected by excess noise 

- Fixes distance issue 

• Reconciliation Efficiency 

- FEC using LDPC can improve /? better than linearly 

- Values of /? approaching 0.95 are theoretically possible 

• Brute Force 

- Higher transmission rate, more sidebands, more channels 

- See next slide 
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Brute Force Scaling 



Number DWDM 


1 


2 


4 


8 


16 


32 


Channels 














Insertion Loss of 


OdB 


<=1dB 


<=1dB 


<=3.5dB 


<=4.5 


<=5.4 


DWDM 














components 














Net Raw Key 


3.2 Gbit/s 


6.4 Gbit/s 


12.8 Gbit/s 


25.6 Gbit/s 


51 .2 Gbit/s 


102 Gbit/s 


Rate 














Final Secret Key 


192Mbit/s 


340 Mbit/s 


678 Mbit/s 


768 Mbit/s 


1 .2 Gbit/s 


1 .8 Gbit/s 


Rate @ 5dB loss 














(-25 km) 














Final Secret Key 


48 Mbit/s 


85 Mbit/s 


170 Mbit/s 


180 Mbit/s 


277 Mbit/s 


451 Mbit/s 


Rate@10dB 














loss (-50 km) 














Final Secret Key 


1 .3 Mbit/s 


2.0 Mbit/s 


3.8 Mbit/s 


4.6 Mbit/s 


7.5 Mbit/s 


12.3 Mbit/s 


Rate @ 25dB 
loss (-125 km) 















Friday, June 01, 2012 



quint* »9*nci| Hfam 



APPLIED QKD 



Application of QKD 
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Embeddable KM libraries enforcing security policy 

Link and network encryption 

One-time pad cipher support 

Third party device and application support 

Secure key lifecycle management 
Cryptographic policy and control 
Separation of duty 
Authentication, logging and audit 
OASIS KMIP interface 

Continuous variable QKD 

Fibre optic and free space (planned) media 

Optional implementation levels to suit environment 

Quantum entropy source 

Optical and electronic hardware true RNG 

Very high speed 



Quantum Entropy Source 

Implementation 
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Passes NIST & Dieharder tests 



Quantum Key Distribution 

Optical layer 




Alice 
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Alice 

- Generates string of random data bits (TRNG) 

- Prepares & transmits displaced coherent states (AM & PM) 
Bob 

- Measures both amplitude and phase quadratures (2xHD) 
Alice & Bob 

- Determine Eve's information (random 50%of data) 

- Post-selection (PS) 

- Error correction (EC) 

- Privacy amplification (PA) 



Key Management 

Quantum Key Manager 



Manages cryptographic key and 
related material 

- Distributed, information-theoretic 
secure key generation 

- Centralised security policy 
management 

- Cryptographic key I ifecycle 
management 

Provides secure key distribution 

- Authenticates access requests 

- Logs access requests 
Is simple to use 

- OASIS KMIP interface 

- Vendor neutral 
Lowers cost 
Improves security 
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OASIS KM IP TC Members 


OASIS KM IP TC Members 


American Express 


Mitre Corporation 


Axway Software 


National Security Agency 


CA Technologies 


NetApp 


Credant Technologies, Inc. 


NIST 


Cryptsoft PtyLtd. 


Oracle 


Election Systems & Software 


PrimeKey Solutions AB 


EMC 


Quantum Corporation 


Emulex Corporation 


QuintessenceLabs Pty Ltd. 


EURECOM 


Red Hat 


Freescale Semiconductor, Inc. 


SafeNet, Inc. 


Hewlett-Packard 


Skyworth TTG Holdings Limited 


IBM 


Symantec Corp. 


IECA. Inc. 


Taraet Corporation 
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Information Protection 

Data ARITIU Model 
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Deployment 

Heterogeneous IT Environment 
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Telstra Pilot 

November, 2010 
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Loop 1 
Loop 2 
Loop 3 
Loop 4 



2.5 km 
6.0 km 
9.5 km 
17.1km 
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Proposed Deployment 

NASA/JPL-2012 



Prototype unconditionally 
secure communications 
network, spanning fibre 
and free space links 

Phased project 

- Terrestrial fibre 

• NASA Ames to J PL Pasadena 

- Terrestrial free space 

- Ground to aircraft 

- Ground to satellite 
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Questions? 

J ohn Leiseboer 

CTO, QuintessenceLabs Pty Ltd 

jl@quintessencelabs.com 
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